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CLAIMS 

1. An ultrasound imaging system comprising a hard 
disk, an operating system and a vi rus scanner com prising 
means for detecting a file having an attribu te of a vi rus 
before said file is installed on said hard disk by said 
operating system. 

2 . The ultrasound imaging system as recited in 
claim 1, wherein said attribute is a checksum of said file. 

3. The ultrasound imaging system as recited in 
claim 1, wherein said attribute is a size of said file. 



10 4. The ultrasound imaging system as recited in 

%! claim 1, further comprising a display subsystem, wherein 

^ said virus scanner further comprises: 

e Li 

i~ means for actuating display of a graphical user 

C5 interface by said display subsystem in response to 

?m 15 detection of said file, said graphical user interface 

fU comprising a virus alert and a virtual actuator; and 

u means for instructing said operating system to 
install said file in response to selection of said virtual 



actuator . 

20 5. The ultrasound imaging system as recited in 

claim 4, further comprising a log of virus detection 
events, wherein said virus scanner further comprises means 
for logging an entry in said log in response to selection 
of said virtual actuator. 

25 6. The ultrasound imaging system as recited in 

claim 1, further comprising: 

a registry containing information registering 
authorized processes; and 
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a virus protection monitor comprising means for 
suspending a process to be started by said operating 
system, means for receiving an identifier identifying said 
suspended process from said operating system, and means for 
5 detecting that said suspended process is not registered in 
said registry. 

7. The ultrasound imaging system as recited in 
claim 6, wherein said information in said registry is 
encrypted, further comprising a decrypter arranged to 

10 decrypt encrypted information sent from said registry to 
said virus protection monitor. 

8. The ultrasound imaging system as recited in 
"J claim 6, further comprising a display subsystem, wherein 
,i said virus protection monitor further comprises means for 
fU 15 actuating display of a first graphical user interface by 
L. said display subsystem in response to detection that said 
:.q suspended process is not registered, said first graphical 
j« user interface comprising a virus alert and a virtual 

actuator . 

2 0 9. The ultrasound imaging system as recited in 

claim 8, wherein said virus protection monitor further 
comprises means for instructing said operating system to 
kill said suspended process in response to selection of 
said virtual actuator on said first graphical user 

25 interface. 

10. The ultrasound imaging system as recited in 
claim 9, further comprising a log of virus detection 
events, wherein said virus protection monitor further 
comprises means for logging an entry in said log in 

30 response to selection of said virtual actuator on said 
first graphical user interface. 

11. The ultrasound imaging system as recited in 
claim 9, wherein said virus protection monitor further 
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comprises means for instructing said operating system to 
remove from said hard disk the file that started said 
suspended process in response to selection of said virtual 
actuator on said first graphical user interface. 

5 12. The ultrasound imaging system as recited in 

claim 8, wherein said virus protection monitor further 
comprises : 

means for actuating display of a second graphical 
user interface by said display subsystem in response to 
10 selection of said virtual actuator on said first graphical 
user interface, said second graphical user interface 
comprising a request for confirmation and a virtual 
actuator ; and 



5 



means for adding information to said registry for 
15 registering said suspended process in response to selection 
P of said virtual actuator on said second graphical user 

^3 interface. 

ru 

?3 13. The ultrasound imaging system as recited in 

C3 claim 12, wherein said information in said registry is 

20 encrypted, further comprising an encrypter arranged to 

encrypt information sent from said virus protection monitor 

to said registry. 

14. An ultrasound imaging system comprising: 
a hard disk; 

2 5 a registry containing information registering 

authorized processes; and 

a computer programmed to perform the following 
steps: suspending a process to be started; and detecting 
that said suspended process is not registered in said 
30 registry. 
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15. The ultrasound imaging system as recited in 
claim 14, wherein said information in said registry is 
encrypted, said computer being further programmed to 
decrypt encrypted information read from said registry. 

16. The ultrasound imaging system as recited in 
claim 14, further comprising a display subsystem, wherein 
said computer is further programmed to actuate display of a 
first graphical user interface by said display subsystem in 
response to detection that said suspended process is not 
registered, said first graphical user interface comprising 
a virus alert and a virtual actuator. 

17. The ultrasound imaging system as recited in 
claim 16, wherein said computer is further programmed to 
kill said suspended process in response to selection of 
said virtual actuator on said first graphical user 
interface. 

18. The ultrasound imaging system as recited in 
claim 17, further comprising a log of virus detection 
events, wherein said computer is further programmed to log 
an entry in said log in response to selection of said 
virtual actuator on said first graphical user interface. 

19. The ultrasound imaging system as recited in 
claim 17, wherein said computer is further programmed to 
remove from said hard disk the file that started said 
suspended process in response to selection of said virtual 
actuator on said first graphical user interface. 

20. The ultrasound imaging system as recited in 
claim 16, wherein said computer is further programmed to 
perform the following steps: 

actuating display of a second graphical user 
interface by said display subsystem in response to 
selection of said virtual actuator on said first graphical 
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user interface, said second graphical user interface 
comprising a request for confirmation and a virtual 
actuator ; and 

adding information to said registry for 
registering said suspended process in response to selection 
of said virtual actuator on said second graphical user 
interface. 

21. The ultrasound imaging system as recited in 
claim 20, wherein said information in said registry is 
encrypted, said computer being further programmed to 
encrypt information before placing it in said registry. 

22. A method of protecting an ultrasound imaging 
system against viruses, comprising the steps of: 

storing a registry on a hard disk, said registry 
containing information registering authorized processes; 

suspending a process to be started; and 

detecting that said suspended process is not 
registered in said registry. 

23. The method as recited in claim 22, wherein 
said information in said registry is encrypted, further 
comprising the step of decrypting information read from 
said registry. 

24. The method as recited in claim 22, further 
comprising the step of displaying a first graphical user 
interface in response to detection that said suspended 
process is not registered, said first graphical user 
interface comprising a virus alert and a virtual actuator. 

25. The method as recited in claim 24, further 
comprising the step of killing said suspended process in 
response to selection of said virtual actuator on said 
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first graphical user interface, 

26. The method as recited in claim 25, further 
comprising the step of placing an entry in a log of virus 
detection events in response to selection of said virtual 
actuator on said first graphical user interface. 

27. The method as recited in claim 25, further 
comprising the step of removing from said hard disk the 
file that started said suspended process in response to 
selection of said virtual actuator on said first graphical 
user interface . 

28. The method as recited in claim 24, further 
comprising the steps of : 

displaying a second graphical user interface in 
response to selection of said virtual actuator on said 
first graphical user interface, said second graphical user 
interface comprising a request for confirmation and a 
virtual actuator; and 

adding information to said registry for 
registering said suspended process in response to selection 
of said virtual actuator on said second graphical user 
interface. 

29. The method as recited in claim 28, wherein 
said information in said registry is encrypted, further 
comprising the step of encrypting information before 
placing it in said registry. 
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